Focus on Microsoft
Re: Tracking down a user in a large AD network Jul 25 2003 08:58PM
simonis (simonis myself com)
All,
I've found the solution, thanks to a friendly fellow on the list.
The key event is 680 on the domain controller. It records the
name and source machine for each logon.

Thought it might benefit the list!

-Ds

------------------------------------------------------------------------
---
Your network firewall and IDS products do not prevent Web application
attacks - the most common form of online exploitation- resulting in Web
defacement, data theft, sabotage and fraud.
KaVaDo is the only company that provides a complete suite of Web
application security products.
Download a FREE whitepaper on "Security Policy Automation for Web
Applications":http://www.securityfocus.com/Kavado-focus-ms
------------------------------------------------------------------------
---

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus